Federal regulators have quietly resumed compliance audits of HIPAA-regulated organizations. With the surge in ransomware and ...

On March 21, 2025, the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) announced a settlement of ...

In recent years, health care organizations and the vendors that support them have been prime targets for cyber attacks.

The NPRM introduces the first significant updates to HIPAA’s security rule in over a decade. The NPRM revises definitions of ...

When it comes to compliance with the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”), is ...

Kentucky Governor Andy Beshear signed into law HB 473. The bill amends the Kentucky Consumer Data Protection Act (“KCDPA”) to ...